Conversation Re: O365 Global Admin has no access to recent SharePoint Online site collections in SharePointhttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30467#M2587
<P>Take a closer look at the SPO sites in the SPO Admin Center, if the SC Owner is listed as Company Administrator, then Global Admin will have rights to the SC.</P><P>&nbsp;</P><P>I agree with Trevor and Juan, Global Admins have never had default access to an SC it must be granted.</P><P>Putting an AD group into the SCA group is the easiest way I have found.</P><P>&nbsp;</P><P>The new Azure Privelged Identity Management may offer a nice approach in the future, but its integration with SPO is not very powerfull at this time.</P>Thu, 17 Nov 2016 11:00:13 GMTDean Gross2016-11-17T11:00:13ZO365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30031#M2542
<P>Is it just me, or has anyone else noticed that O365 Global Admins do not automatically get access to recently created Site Collections in SharePoint Online?</P><P>&nbsp;</P><P>We have a small group of O365 Global Admins and all of us have MFA enabled. &nbsp;This means that we often can't use our accounts for scripting and other various O365 add-ins/tools.</P><P>So I have a service account setup, which is also a Global Admin, but doesn't have MFA.</P><P>This account is able to get to older Site Collections (where it's not specifically in the SP Groups), but it's unable to access more recently created site collections.</P><P>&nbsp;</P><P>I either get the:</P><P>&nbsp;</P><DIV><DIV><DIV><DIV><DIV><DIV><DIV><DIV class="ms-spo-technicalSection"><DIV class="ms-descriptiontext ms-spo-technicalItemsSection"><DIV class="ms-spo-technicalItem"><EM>Access Denied </EM><BR /><BR /><EM>myserviceaccount@corp.onmicrosoft.com does not have permissions to access this resource. </EM><BR /><EM>Here are a few ideas: </EM><BR /><BR /><EM>Please ask the site admin to give you access.</EM><BR /><BR /><EM>If you have a different account, try signing in with that account.</EM><BR /><EM>This will sign you out of all other Office 365 services that you're signed into at this time.</EM><BR /><EM>If this problem persists, contact your support team and include these technical details: </EM><BR /><EM>Correlation ID: xxxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxx&nbsp;</EM><BR /><EM>Date and Time: 15/11/2016 2:00:00 p.m. </EM><BR /><EM>User: myserviceaccount@corp.onmicrosoft.com </EM><BR /><EM>Issue Type: User does not have permissions.</EM></DIV><DIV class="ms-spo-technicalItem">&nbsp;</DIV><DIV class="ms-spo-technicalItem">Or I get the:</DIV><DIV class="ms-spo-technicalItem"><EM>You need permission to access this site.</EM></DIV><DIV class="ms-spo-technicalItem"><EM>[I'd like access, please.]</EM></DIV><DIV class="ms-spo-technicalItem"><EM>Request Access</EM></DIV><DIV class="ms-spo-technicalItem">&nbsp;</DIV><DIV class="ms-spo-technicalItem">Judging by the sites that work, this change looks to have been in about the last month or so.</DIV><DIV class="ms-spo-technicalItem">&nbsp;</DIV><DIV class="ms-spo-technicalItem">Anyone else seeing this?</DIV><DIV class="ms-spo-technicalItem">&nbsp;</DIV><DIV class="ms-spo-technicalItem">I'm going to try creating a SPAdmin only account and see if that has better luck than a Global admin.</DIV><DIV class="ms-spo-technicalItem">&nbsp;</DIV><DIV class="ms-spo-technicalItem">Thanks</DIV><DIV class="ms-spo-technicalItem">Craig</DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV>Tue, 15 Nov 2016 22:08:30 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30031#M2542Deleted2016-11-15T22:08:30ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30032#M2543
This is expected. A Global Admin shouldn't have access to individual sites unless explicitly granted. This is also true of on-prem, where a farm administrator does not automatically have access to Site Collections.Tue, 15 Nov 2016 22:13:56 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30032#M2543Trevor Seward2016-11-15T22:13:56ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30037#M2544
Really? When did this change?<BR /><BR />I have a number of site collections in SPOnline and the Global Admin is able to access most of them, even when they're not in any of the groups.<BR /><BR />It makes sense, it's just a change in behavior.<BR /><BR />Just tested with a brand new SP Admin (not a site collection owner) and it has access to some sites, but not others.<BR /><BR />This is potentially going to make it difficult to have a SPOnline service account, unless you add it to the site collection owners, for all site collections - which given that every new "thing" that MS builds goes off and creates site collections (I'm looking at you Planner, Groups, Teams) which are "less" manageable, is going to be fun...<BR />Tue, 15 Nov 2016 22:24:24 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30037#M2544Deleted2016-11-15T22:24:24ZRE: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30084#M2547
exactly i know this functionality is already longer implemented if you login as a partner but as global admin it is new but i think it is a good one.Wed, 16 Nov 2016 06:28:26 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30084#M2547Deleted2016-11-16T06:28:26ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30090#M2550
I agree with Trevor and It have been always like this...if the user wasn't the creator of the Site Collections, he/she is not going to be able to access to them...but you can add he user as Site Collection Administrator using the UI or PowerShellWed, 16 Nov 2016 06:51:55 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30090#M2550Juan Carlos González Martín2016-11-16T06:51:55ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30406#M2582
I agree that this is the way it should be, but it certainly hasn't always been this way. And I still have a Global Admin account that can access some sites (when they are not in any of the groups), but not others.<BR /><BR />The big problem is sites created by the likes of Planner and Teams - aka O365 Group sites. These do not show up when you do a Get-SPOSite.<BR />And if you specify them specifically (e.g. Get-SPOSite "<A href="https://mycorp.sharepoint.com/sites/O365GroupSite" target="_blank">https://mycorp.sharepoint.com/sites/O365GroupSite</A>") you actually get anything unless you already have permission - which if the O365 site was created by someone else (and by default, anyone can create Planner/Teams/O365 Groups), then you're stuck.<BR /><BR />There's some suggestion that the (now in preview) v2 of Azure AD PowerShell, is able to enumerate O365 Groups and so we may be able to access the site details that way, but I haven't tried this yet.<BR /><BR />The underlying reason for doing this: I want to be able to find all the External users and look at what permissions they have on which sites (essentially to find rogue sharing).Thu, 17 Nov 2016 04:37:09 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30406#M2582Deleted2016-11-17T04:37:09ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30418#M2583
This is different stuff...torday and by design Groups sites are hidden and not shown in the SharePoint Online Administration (same happens with Office 365 Video Channels). The only way to get listed / get details of a Group sites is using PowerShell and specifically the SPO cmdlets: Get-SPOSite, Set-SPOSite are your best friedns here. In the future I believe Microsoft is working on showing also Groups sites there that by the way it's something required for modern team sitesThu, 17 Nov 2016 06:41:57 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30418#M2583Juan Carlos González Martín2016-11-17T06:41:57ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30467#M2587
<P>Take a closer look at the SPO sites in the SPO Admin Center, if the SC Owner is listed as Company Administrator, then Global Admin will have rights to the SC.</P><P>&nbsp;</P><P>I agree with Trevor and Juan, Global Admins have never had default access to an SC it must be granted.</P><P>Putting an AD group into the SCA group is the easiest way I have found.</P><P>&nbsp;</P><P>The new Azure Privelged Identity Management may offer a nice approach in the future, but its integration with SPO is not very powerfull at this time.</P>Thu, 17 Nov 2016 11:00:13 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30467#M2587Dean Gross2016-11-17T11:00:13ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30974#M2672
<P>Thanks for responding guys.</P><P>&nbsp;</P><P>But I still have the problem that &nbsp;I can't get the details of sites that I don't know about. &nbsp;And I wont know about them unless I have access. &nbsp;And I can't give myself (or my service account) access, unless I know about them...</P><P>&nbsp;</P><P>Given that Get-SPOSite doesn't return all sites by default and that the Site Collection list in O365 Admin/SPO Admin doesn't display Group sites (and Video, etc). How can I reliably get a list of site collections? &nbsp;To which I can then add my admin group/service account to, so that I can programmaticaly access those sites going forward.</P><P>&nbsp;</P><P>Users are still able to external share from Group sites, which means there are potentially external users with access to content that I can't audit.</P><P>&nbsp;</P><P>There are 3rd party tools claiming to be able to audit/report/change this stuff. &nbsp;How are they doing it? &nbsp;Or are they actually trapped in the same way, with minimal, if any, visability of Group sites?</P>Mon, 21 Nov 2016 00:23:13 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30974#M2672Deleted2016-11-21T00:23:13ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30993#M2673
<P>You can use the below PowerShell script to get the details of the SPO Site Collections for the Office 365 Groups.</P><P>&nbsp;</P><PRE>$cred=Get-Credential
$exchangeSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://outlook.office365.com/powershell-liveid/" -Credential $cred -Authentication "Basic" -AllowRedirection
Import-PSSession $exchangeSession -DisableNameChecking
Connect-SPOService -Url https://tenantname-admin.sharepoint.com -credential $cred
$Groups=Get-UnifiedGroup |Where-Object {$_.SharePointSiteUrl -ne $null}
$Groups | Foreach-Object{
$Group = $_
$GName=$Group.SharePointSiteUrl
Get-SPOSite -Identity $GName -Detailed |fl
} </PRE><P>To add a member to Office 365 Groups, you can use the below one.</P><PRE>Add-UnifiedGroupLinks -LinkType Members -Identity "engineering" -Links "alland@XXXXX.onmicrosoft.com</PRE><P>I am sure that the Office 365 Group's SPO File audits are available in "Audit log search" in protection centre [<A href="https://protection.office.com/#/unifiedauditlog" target="_blank">https://protection.office.com/#/unifiedauditlog</A>]. Screen-shot of the audit logs for O365 groups is posted below.</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="audit o365 group.png" style="width: 999px;"><img src="https://gxcuf89792.i.lithium.com/t5/image/serverpage/image-id/8592iEFD812B57199CB8D/image-size/large?v=1.0&amp;px=999" title="audit o365 group.png" alt="audit o365 group.png" /></span>﻿</P><P>&nbsp;</P>Mon, 21 Nov 2016 08:43:51 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/30993#M2673NarasimaPerumal Chandramohan2016-11-21T08:43:51ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/31242#M2693
Thanks for that.<BR /><BR />Works a treat!<BR /><BR />Yeah, I know user activity on Group sites does turn up in the Audit logs. But I'm trying to audit External users and what they have access to.Tue, 22 Nov 2016 02:16:26 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/31242#M2693Deleted2016-11-22T02:16:26ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/31247#M2696
<P>OK, so here's my final solution.</P><P>&nbsp;</P><P>What it does is enumerate all the site collections via Get-SPOSite and sets a particuarly Azure AD Security group to be a Site Collection Admin. &nbsp;Then it enumerates all the groups in Exchange Online, looking for ones with URLs, which are O365 Groups, which it then is able to set the Security Group as a Site Collection Admin.</P><P>The end result - I'm able to use a service account to enumerate ALL site collections (in two passes) and perform actions on them.</P><P>&nbsp;</P><P>Thanks for everyone's help. &nbsp;This is not as simple as it should have been!</P><P>&nbsp;</P><P>One key gotcha - the only way I've found to get the Claims ID for the group, is manually in the SPOnline UI (Site Permissions | Check Permissions). &nbsp;Would love to have a PowerShell mechanism for that!</P><P>&nbsp;</P><P>Note: I have this running in a SPOnline Management Shell PowerShell console.</P><P>&nbsp;</P><P>Thanks</P><P>Craig</P><P>&nbsp;</P><PRE>Import-Module MSOnline
# Jack Fruh - sharepointjack.com
# add a user or users to the site collection admin role on every site collection in Office 365 sites (SharePoint Online)
$SPOnlineAdminClaim = "c:0-.f|rolemanager|s-1-5-21-XXXXXXXXXX-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXX"
#setup a log path
$path = "$($(get-location).path)\LogFile.txt"
#note we're using start-transcript, this does not work from inside the powershell ISE, only the command prompt
start-transcript -path $Path
write-host "This will connect to SharePoint Online"
#Admin Variables:
$Adminurl = "https://TENANT-admin.sharepoint.com"
Write-Host "Get Credentials"
$userName = 'SERVICE ACCOUNT EMAIL ADDRESS'
$password = ConvertTo-SecureString 'SERVICE ACCOUNT PASSWORD' -AsPlainText -Force
$credential = New-Object System.Management.Automation.PSCredential ($userName, $password)
#Connect to SPO
Connect-SPOService -url $Adminurl -credential $credential
write-host "Connected" -foregroundcolor green
Write-Host "Get SPO Sites"
$sites = get-sposite
Foreach ($site in $sites)
{
Write-host "Adding users to $($site.URL)" -foregroundcolor yellow
#Set the site collection admin flag for the Site collection admin
write-host "Setting up SPOnline Admins as a site collection admin on $($site.url)..."
set-spouser -site $site.url -loginname $SPOnlineAdminClaim -IsSiteCollectionAdmin $true
write-host "Done" -foregroundcolor green
}
Write-Host "Done With SPO Sites" -ForegroundColor green
Write-Host "Connect to Exchange Online"
$exchangeSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://outlook.office365.com/powershell-liveid/" -Credential $credential -Authentication "Basic" -AllowRedirection
if ($exchangeSession) {
Write-Host "Import Exchange Online Session"
$session = Import-PSSession $exchangeSession -DisableNameChecking -AllowClobber
if ($session) {
Write-Host "Connect to SharePoint Online"
Connect-SPOService -Url $Adminurl -credential $credential
Write-Host "Get Unified Groups"
$Groups=Get-UnifiedGroup |Where-Object {$_.SharePointSiteUrl -ne $null}
Write-Host "Enumerate Groups"
$Groups | Foreach-Object{
$Group = $_
$GName = $Group.SharePointSiteUrl
Write-Host "Setting up SPOnline Admins as a site colection admin on $($GName)..."
Set-SPOUser -Site $GName -LoginName $SPOnlineAdminClaim -IsSiteCollectionAdmin $true
}
Remove-PSSession (Get-PSSession)[0]
}
}
Write-host "Done with everything" -foregroundcolor green
stop-transcript</PRE>Tue, 22 Nov 2016 04:22:11 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/31247#M2696Deleted2016-11-22T04:22:11ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/70303#M6586
<P>But in On Premises you can give Web Application access which gives you all Site Collections within the Web Application.</P><P><BR />It should be an option to add a SP admin to all site collections.&nbsp;</P>Tue, 16 May 2017 13:02:58 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/70303#M6586Kjetil J Ytrehus2017-05-16T13:02:58ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/77136#M7226
<P><LI-USER uid="130"></LI-USER>&nbsp;is correct and... in an on-prem environment you can set a web application policy granting site collection administration to all site collections in a web application. &nbsp;The web application administration layer is not available in SharePoint Online. &nbsp;It is likely that you enjoy site collection administrative permissions to all your on-prem site collections as a result of a web application policy. As a Global admin you can grant yourselft access to any site collections in SharePoint Online so you could add that to the start of your script (Set-SPOUser -site $SiteCollURL -LoginName $SiteCollectionAdmin1 -IsSiteCollectionAdmin $True) and you could remove the user from this role which the operation on the site collection were complete. &nbsp;</P>Mon, 12 Jun 2017 18:05:04 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/77136#M7226Gregory Frick2017-06-12T18:05:04ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/83582#M7750
<P>I for one, love this feature. A Global admin should be able to administer the services and infrastructure, but they are not necessarily the right role for the managing and supporting the data.&nbsp; That is how breaches, and data loss can occur.&nbsp;</P>Thu, 29 Jun 2017 13:46:50 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/83582#M7750Louis Simonetti2017-06-29T13:46:50ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/91439#M8513
errorSun, 30 Jul 2017 06:57:56 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/91439#M8513Deleted2017-07-30T06:57:56ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/97285#M9103
<P>I have the same need for such a script. But I don't get where this line</P><P>&nbsp;</P><PRE>$SPOnlineAdminClaim = "c:0-.f|rolemanager|s-1-5-21-XXXXXXXXXX-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXX"</PRE><P>&nbsp;</P><P>comes from. Where do I find this information for myself (or the AD group I am in)?</P><P>&nbsp;</P><P>As a global admin by boss expects that I have access to everything.</P>Thu, 17 Aug 2017 16:30:33 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/97285#M9103Robert K2017-08-17T16:30:33ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/116381#M10461
<P>How does this apply to onsite backups (from cloud to secondary) or for migrating company data if you're going to collapse the environment. How would you know you have all your companies data without something having full access to all the sites both on O365 and it's ancillary off path products like Stream and Teams?</P>Fri, 13 Oct 2017 14:41:56 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/116381#M10461Jason Heeter2017-10-13T14:41:56ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/139039#M12641
<P>This is really annoying. Users are asking for help in their site and we have no power over helping them with it.&nbsp;</P>
<P>SO, how can admins assit users who need help setting up their newly created site?</P>Wed, 20 Dec 2017 21:49:57 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/139039#M12641Ninos Yacoub2017-12-20T21:49:57ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/144997#M13201
<BLOCKQUOTE><HR /><LI-USER uid="103755"></LI-USER>.krauss.skype wrote:<BR />
<P>I have the same need for such a script. But I don't get where this line</P>
<P>&nbsp;</P>
<PRE>$SPOnlineAdminClaim = "c:0-.f|rolemanager|s-1-5-21-XXXXXXXXXX-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXX"</PRE>
<P>&nbsp;</P>
<P>comes from. Where do I find this information for myself (or the AD group I am in)?</P>
<P>&nbsp;</P>
<P>As a global admin by boss expects that I have access to everything.</P>
<HR /></BLOCKQUOTE>
<P>&nbsp;</P>
<BR /><BR />
<P>It comes from this bit:<BR />
One key gotcha - the only way I've found to get the Claims ID for the group, is manually in the SPOnline UI (Site Permissions | Check Permissions). Would love to have a PowerShell mechanism for that!</P>Sun, 14 Jan 2018 21:03:45 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/144997#M13201Deleted2018-01-14T21:03:45ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/145004#M13204
No idea. You're asking the wrong person.<BR />You'd probably need to check the documentation for your backup software.Sun, 14 Jan 2018 21:12:40 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/145004#M13204Deleted2018-01-14T21:12:40ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/145005#M13205
sorry for spamming the thread, it kept telling me it had failed to post...Sun, 14 Jan 2018 21:13:14 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/145005#M13205Deleted2018-01-14T21:13:14ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/145007#M13206
Apparently this will all be fixed up in the new SP Online Admin UI.Sun, 14 Jan 2018 21:14:10 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/145007#M13206Deleted2018-01-14T21:14:10ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/170575#M15228
<P>&nbsp;</P>
<P>Great script, saved my 4ss</P>
<P>&nbsp;</P>
<P>Proposed enhancement : replace the current site admin by the new one (global admin for example), and add the old one as the secondary site admin.</P>Mon, 12 Mar 2018 14:49:15 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/170575#M15228Matthieu DEMOULIN2018-03-12T14:49:15ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/183331#M16638
<P><LI-USER uid="2088"></LI-USER></P><P>Can you please ,if possible, expound on&nbsp;</P><P>1. where you get this info</P><P>2. more details&nbsp;</P>Mon, 16 Apr 2018 18:28:46 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/183331#M16638Yuri Deglin2018-04-16T18:28:46ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/183388#M16645
<P>Hey&nbsp;<LI-USER uid="2969"></LI-USER>,</P><P>&nbsp;</P><P>the details a <A href="https://techcommunity.microsoft.com/t5/SharePoint-Blog/Introducing-the-new-SharePoint-Admin-Center/ba-p/70294" target="_blank">HERE</A>.</P><P>&nbsp;</P><P>Hope that helps.<BR />Craig</P>Mon, 16 Apr 2018 21:08:14 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/183388#M16645Deleted2018-04-16T21:08:14ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/195223#M17763
Exactly.<BR />It's the same case with me.<BR />Users are able to mess around with creating sites and teams, and when they cry for help I must ask them to give me access... an the we go into the painful loop of explaining where to click and what to do.<BR />So my 5 minute intervention turns into an hour(s) long jumping through hoops for the simplest of tasks.Fri, 18 May 2018 13:20:07 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/195223#M17763Miroslav Popov2018-05-18T13:20:07ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/210046#M19196
SInce I have to do both, it has made it very difficult for me. I have a lot of users just going in creating stuff and then never delete it. How do I manage that?<BR />Wed, 27 Jun 2018 19:31:01 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/210046#M19196Torey Kirby2018-06-27T19:31:01ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/271834#M22560
My unfortunate response has been to turn off global Site, Team, O365 Group, Planner creation and restrict it to a handful of users who know what they're doing (naming schemes, conflicts, etc) until we have better tooling around site provisioning... which one of my guys has been working on using the SharePoint Patterns and Practices stuff.Tue, 16 Oct 2018 02:35:06 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/271834#M22560Deleted2018-10-16T02:35:06ZRe: O365 Global Admin has no access to recent SharePoint Online site collectionshttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/280821#M22990
Great and very helpful script. Thank you!Wed, 31 Oct 2018 20:28:48 GMThttps://techcommunity.microsoft.com/t5/sharepoint/o365-global-admin-has-no-access-to-recent-sharepoint-online-site/m-p/280821#M22990Thomas Andre2018-10-31T20:28:48Z